Basic Malware Cleaning
Common Information
Type Value
UUID d81bb552-56ec-4aa4-8fef-a35e5d96db84
Fingerprint 9c06995921ad0f83
Analysis status DONE
Considered CTI value 0
Text language
Published July 4, 2013, 9:30 a.m.
Added to db Jan. 18, 2023, 8:08 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Blaze's Security Blog
Title Basic Malware Cleaning
Detected Hints/Tags/Attributes 39/2/34
Attributes
Details Type #Events CTI Value
Details Domain 30
www.mediafire.com
Details Domain 1
somename.com
Details Domain 16
zeltser.com
Details Domain 212
technet.microsoft.com
Details Domain 3
bartblaze.blogspot.com
Details Domain 2
www.raktor.net
Details Domain 2
exehelper.com
Details Domain 6
www.gmer.net
Details Domain 8
download.bleepingcomputer.com
Details Domain 12
www.kernelmode.info
Details Domain 2
www.antirootkit.com
Details File 1
win32extension.dll
Details File 12
svchosts.exe
Details File 1122
svchost.exe
Details File 1
4dw4r3vdqmxsvfxr.dll
Details File 1260
explorer.exe
Details File 1
basics-for-malware-analysis-lab.html
Details File 1
inherit.exe
Details File 19
kernelmode.inf
Details File 40
viewtopic.php
Details File 1
rootkit-unhooker.htm
Details Url 1
http://www.mediafire.com/?gz7qic8h7xcgyst
Details Url 1
https://zeltser.com/malware-analysis-toolkit
Details Url 1
http://technet.microsoft.com/nl-nl/sysinternals/bb963902
Details Url 1
http://bartblaze.blogspot.com/2013/06/basics-for-malware-analysis-lab.html
Details Url 2
http://www.raktor.net/exehelper/exehelper.com
Details Url 4
http://www.gmer.net
Details Url 1
http://download.bleepingcomputer.com/subs/minifixes/inherit.exe
Details Url 1
http://www.kernelmode.info/forum/viewtopic.php?f=11&t=10
Details Url 2
http://technet.microsoft.com/en-us/sysinternals/bb896653
Details Url 1
http://technet.microsoft.com/en-us/sysinternals/bb897445
Details Url 1
http://www.antirootkit.com/software/rootkit-unhooker.htm
Details Url 1
https://bartblaze.blogspot.com
Details Windows Registry Key 493
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run